Extracted

• • Target

    ae25e045665c1d44a4a01fb8b902a2f8c6eff324c16e08ebc35761ef378ded78.exe

  • Size

    669KB

  • MD5

    49f0d6e43350d8fb69f5cd2072c6a5c2

  • SHA1

    4b4ff4f0fb248c14a915a9bfa00e8ac25ec0603b

  • SHA256

    ae25e045665c1d44a4a01fb8b902a2f8c6eff324c16e08ebc35761ef378ded78

  • SHA512

    734db8b58be794620cbe5d260f7f43d176dfac8ecc140c56b607e90a2e8485d81ca5666fc50ef18f675b1a760ca1ad09c2036963ff76ac7aceafdf739c017583

  • SSDEEP

    12288:Qtz8L6guquZajfTIISp83HqvKiiAEMToaxMRSR5SOqG4yPa:ZLPwCTIlEHOipMkayRU5JqG4yPa

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2